This vulnerability in the Sync Master Sheet – Product Sync with Google Sheet for WooCommerce plugin arises from missing authorization checks, which leads to incorrect access control. Exploiting this flaw could allow an attacker to perform unauthorized actions that compromise data integrity. The affected versions include all versions up to 1.1.3. The CVSS 3.1 base score of 7.5 reflects a network attack vector with low attack complexity, no privileges required, no user interaction, and an impact on integrity but not confidentiality or availability. No patch or official remediation guidance is currently provided by the vendor or in public advisories.

The vulnerability allows unauthorized attackers to exploit missing authorization controls, potentially modifying or corrupting data within the WooCommerce product synchronization process. This could lead to unauthorized changes in product data synced with Google Sheets, affecting data integrity. There is no indication of confidentiality or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin's functionality to trusted users only and monitor for unusual activity related to product synchronization. Avoid exposing the plugin's interfaces to untrusted networks or users.